JcowCVEs & Vulnerabilities
3 CVEs affecting Jcow products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
jcow cms 2jcow 1
CVE-2011-3202MEDIUM
A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.
15 Jan 2020
6.1
CVSS
CVE-2011-3203CRITICAL
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.
14 Jan 2020
9.8
CVSS
CVE-2011-3746MEDIUM
Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files.
24 Sep 2011
5.0
CVSS
← PrevPage 1 / 1Next →